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Abstract 

A probabilistic analysis, using the 2-parameter Weibull-Johnson method, was performed on 
experimental life test data from space shuttle actuator bearings. Experiments were performed on a test rig 
under simulated conditions to determine the life and failure mechanism of the grease lubricated bearings 
that support the input shaft of the space shuttle body flap actuators. The failure mechanism was wear that 
can cause loss of bearing preload. These tests established life and reliability data for both shuttle flight 
and ground operation. Test data were used to estimate the failure rate and reliability as a function of the 
number of shuttle missions flown. The Weibull analysis of the test data for the four actuators on one 
shuttle, each with a 2-bearing shaft assembly, established a reliability level of 96.9 percent for a life of 
12 missions. A probabilistic system analysis for four shuttles, each of which has four actuators, predicts a 
single bearing failure in one actuator of one shuttle after 22 missions (a total of 88 missions for a 4-shuttle 
fleet). This prediction is comparable with actual shuttle flight history in which a single actuator bearing 
was found to have failed by wear at 20 missions. 

Nomenclature 


e Weibull slope 

F probability of failure, fraction or percent 

h lubricant film thickness, m (in.) 

i failure number 

L life, hr, revolutions, missions, etc. 

L mis mission life based on mission spectrum, missions 
L n life at operating condition n , hr, revolutions, missions, etc. 

Z, system life based on operation condition n, missions 

Lp characteristic life or life at which 63.2 percent of population fails, hr, revolutions, missions, etc. 

Tio 10-percent life or life at which 90 percent of a population survives, hr, revolutions, missions, etc. 
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L\ 1 -percent life or life at which 99 percent of a population survives, hr, revolutions, missions, etc. 

Z 0 .i 0.1 -percent life or life at which 99.9 percent of a population survives, hr, revolutions, missions, etc. 
n number of components (samples) 

S probability of survival (reliability), fraction or percent 

Ssy s probability of survival or reliability of a system of components, fraction or percent 
X n time fraction spent at operating condition n , fraction or percent 


Introduction 


Spacecraft have many components whose surfaces either oscillate or rotate slowly. Typical 
applications involve rolling-element bearings that support scanning mirrors, extendable booms, and the 
mechanical actuators for control surfaces on some reentering spacecraft. Oscillatory motion is motion in 
which the shaft turns in one angular direction and then returns in the same arc on either a periodic or 
intermittent basis. For boom oscillation, the angular velocities are generally low (<6°/s) and equal in both 
directions. For scanning mirrors the rotation in one direction is usually extremely slow (2°/s) followed by 
a rapid return (>60°/s) (ref. 1). The body flap actuators used in the space shuttle operate at input speeds to 
80 rpm against rapid deflections caused by transient aerodynamic loads during reentry. 

The lubrication of spacecraft bearings is as varied as their space applications. The purpose of lubrication 
is to separate the surfaces in relative motion by a material that has a low resistance to shear so that the 
surfaces do not sustain significant damage. This low resistance material can be comprised of a variety of 
materials (e.g., adsorbed gases, liquids, films, chemical reaction products, or solid lubricants) (ref. 1). 

Depending on the type of intervening film and its thickness, a number of lubrication regimes can be 
identified (ref. 1). These regimes are called hydrodynamic, elastohydrodynamic, mixed, and boundary. 
The regimes can be defined by the approximate thickness ( h ) of the separating film. 

In the hydrodynamic lubrication regime, the surfaces are completely separated by the film, h> 10“ 7 m 
(10“ 5 in.). The hydrodynamic regime blends into the elastohydrodynamic lubrication regime, where loads 
cause elastic deformation of the surfaces of the mechanism and affect the viscosity of the fluid film, 
10” 8 </z<10” 6 m (10”" 6 </z<10^ in.). 

As the film becomes progressively thinner, surface interactions start taking place. This regime of 
increasing friction, which combines asperity interactions and fluid film effects, is the mixed lubrication 
regime, 10“ 9 </z<10” 8 m (10” 7 </z<10“ 6 in.). The transition between full film and mixed lubrication depends 
not only on film thickness but also on the roughness of the bearing surfaces. The following surface 
finishes (arithmetic averages) are typically specified for gas turbine engine bearings (ref. 2): 


Balls, pm, (pin.) 

Ball races, pm, (pin.) 
Rollers, pm, (pin.) 
Roller races, pm, (pin.) 


<0.025 (<1) 
<0.125 (<5) 
<0.100 (<4) 
<0.125 (<5) 


Finally, in the boundary lubrication regime, oxide films and other impurities are needed to prevent 
welding of the contacting surfaces h< 10“ 9 m (10“ 7 in.). Most space mechanisms operate in the boundary 
lubrication regime. 

In the boundary lubrication regime, the degree of metal-to-metal contact and the wear rate increase as 
the load increases. Noncorrosive lubricants allow adhesive wear under boundary and mixed lubrication 
conditions. Under moderate loads, wear is generally mild. However, very high loads create severe adhesion 
and surface distress (scoring). Lubricants that contain corrosive (extreme pressure and antiwear) additives 
can extend the boundary regime before boundary film failure begins. At this point, total surface failure 
occurs, followed by seizure. Besides the load, other operating variables that will affect lubricant film 
performance include speed, temperature, and the environment, including the ambient atmosphere (ref. 1). 

A search of the literature reveals a large amount of qualitative wear data that has been generated on 
an assortment of laboratory testers over a period of decades. Equations and analysis exist together with 


NASA/TM— 2008-2 15057 


2 



friction and wear data to allow for calculating lubricant film thickness, lubrication operating regime, and 
the qualitative severity of the wear (refs. 3 to 5). However, there is no definitive analysis that allows an 
engineer to predict, with any degree of engineering certainty, the quantity of wear that can occur in a 
specific application. Quantitative results need to be obtained experimentally for specific applications. 
These resulting wear data are not deterministic, but rather, statistical (distributive). 

Bearing life and reliability calculations are usually based on rolling element (contact) fatigue of the 
running surfaces. In some applications, particularly where lubrication is marginal, the failure mechanism 
may become adhesive or abrasive wear rather than fatigue of the rolling elements and races of the 
bearings. Reference 6 compares tests in a vacuum spiral orbit tribometer with full-scale rig tests of 
instrument scanner bearings that continuously operate in dither motion. Reference 7 discusses accelerated 
wear testing of the bearings on small electric motors. Reference 8 covers wear phenomena. However, its 
coverage of life modeling deals with fatigue failure, which becomes a source of wear debris, rather than 
wear itself as a failure mechanism. Most of the other reports in the literature that deal with wear life and 
reliability of bearings, concern the beneficial effect from filtration of liquid lubricants. Such filtration is 
not feasible with grease lubrication. 

The United States space shuttle was originally intended to have a life of 100 flights for each vehicle 
without scheduled maintenance or inspection. Each shuttle has four body flap actuators (two on each 
wing) on a common segmented shaft. These actuators control the position of the large body flap that 
controls the attitude of the shuttle. During actuator refurbishment and inspection, the grease-lubricated 
ball bearings in these actuators exhibited various degrees of wear. Given the observed wear, the question 
arises regarding the timing for removal of the actuators for refurbishing. To put it concisely, how many 
space shuttle flights should be allowed before the actuators are removed and refurbished because of wear 
of the actuator bearings? 

Based on the above discussion, the objectives of the work reported herein were to: (a) experimentally 
duplicate the operating conditions of the space shuttle body flap actuator input shaft ball bearings; (b) 
generate, under these simulated conditions, a statistical data base codifying bearing wear; (c) determine 
the usable life of the actuator bearings based on a two-parameter Weibull distribution function for the 
bearings using strict-series system reliability; and (d) compare these results to field data from the space 
shuttle fleet. 


Apparatus, Specimens, and Procedure 

Body Flap Actuator Bearings 

Each of the four body flap actuators (shown in cross section in figure 1) is a two stage, differential 
planetary gearbox with a speed reduction ratio of 162:1. The actuator input shaft acts as a tension rod to 
clamp the actuator housing together. The actuator components were greased “for life” and sealed. They 
were not intended to be reopened nor inspected during the operational life of the space shuttles. 

The shaft is supported by two angular-contact ball bearings that carry a heavy axial (thrust) preload of 
16 kN (3,500 lb). The smaller shaft bearing is a full complement, 106-size (30-mm bore) deep-groove ball 
bearing containing 18 balls of 7.14 mm (0.281 in.) diameter. The larger bearing is a full complement, 
108-size (40-mm bore) deep-groove ball bearing containing 21 balls of 7.94 mm (0.3 125 in.) diameter. 
These bearings are made from carbon vacuum degassed (CVD) AISI 52100 steel. 

When the transient aerodynamic load is added, the total bearing load can reach 22 kN (5,000 lb). 
Because of these high loads, the contact stress is very high — up to 3.41 GPa (495 ksi) on the smaller 106- 
size bearing and 3.03 GPa (440 ksi) on the 108-size bearing. With this high load, the ball running track 
extends nearly to the shoulder of the bearing inner race. 

The actuator performs oscillatory motion during reentry from body flap actuation against transient 
aerodynamic loads with input speeds as high as 80 rpm. 
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Figure 1 . — Body flap actuator cross section showing input shaft bearings. 


Lubricant 

The mechanical actuators used on the space shuttle are lubricated by a space-rated, grade 2 grease 
containing a perfluorinated polyether base oil with small polytetrafluoroethylene (PTFE) particles as a 
thickener, and sodium nitrite and dimethyloctyldecylbenzyl ammonium bentonite as rust and corrosion 
inhibitors. The grease has a wide operating temperature range: -80 to 200 °C (-1 12 to 400 °F). The 
viscosity of the lubricant base oil at the three temperatures used for this test program (24, 60, and 74 °C 
(75, 140, and 165 °F)) is approximately 4,750, 128, and 77 cSt, respectively. The grease does not contain 
reactive extreme pressure additives that are typically added to hydrocarbon grease because these additives 
will not dissolve in the base oil (ref. 9). 


Test Apparatus and Procedure 

Tests were conducted at the NASA Marshall Space Flight Center on angular-contact ball bearings 
representative of the smaller (106-size) bearings used on the input shaft of the space shuttle body flap 
actuators (ref. 11). The tests were conducted in air under axial loads between 16 and 22 kN, at ambient 
temperatures of 24 °C (75 °F) to 74 °C (165 °F), and at speeds between 50 and 80 rpm. 

The bearing life test rig (shown in figure 2) uses an electric motor and cog belt drive to rotate the 
bearing shaft. The bearing housings are axially guided on parallel shafts to hold close alignment. The 
axial preload acting on the bearings was manually set with a mechanical screw actuator. The axial load 
was measured by a load cell and monitored by a computer, which automatically terminated the test if the 
load dropped by 1.3 kN. The drive belt creates a small radial load on the bearings, about 10 percent of the 
axial load. The loading conditions are similar to those in the actuator under flight conditions. 

The bearing housing temperature was controlled by circulating ethylene glycol through passages in 
the bearing test housings to raise the test bearing temperature to 60 or 74 °C (140 or 165 °F) for the 
elevated temperature tests. Thermocouples on the outer races monitored the bearing temperatures. 

Test bearings include three used flight bearings that had been removed from flight actuators. These 
were supplemented with 106-size commercial bearings modified to be similar to the full complement 
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bearings used in flight actuators. The original flight bearings were manufactured to RBEC-3 
specifications. The commercial test bearings were RBEC-7. The measured surface finish (arithmetic 
average) in unworn parts of the inner race of the flight bearings was 0.28 pm (11 pin.) compared to 
0.06 pm (2 pin.) for the commercial bearings. The bearings were lubricated by perfluorinated polyether 
oil-based grease as is used in the space shuttle actuators. 

A bearing test spectrum, based on the original actuator life mission spectrum, was developed to 
demonstrate that worn shuttle bearings could operate for 48 flight missions after cleaning and 
relubrication. This would indicate a life of 12 missions with a 4X safety factor. The life mission spectrum 
was based on a compressed version of the shuttle loads analysis. Table 1 shows the run time, speed, load, 
and calculated inner race Hertz stress for each condition of the test spectrum. Stresses were calculated by 
the SHABERTH bearing analysis program (ref. 1 1). In the initial bearing life testing, the test spectrum 
was repeated 48 times in a 24 hr period for a total of 1 12,800 revolutions per test. 


TABLE 1. — BEARING TEST MISSION SPECTRUM 


Time, 

Speed, 

Axial load, 

Inner race Hertz stress, 

min 

rpm 

kN, (lb) 

GPa, (ksi) 

27 

80 

16(3500) 

3.13 (452) 

1.5 

70 

18(4100) 

3.27 (473) 

1.0 

60 

20 (4500) 

3.37 (486) 

0.5 

50 

22 (5000) 

3.41 (495) 


The test program produced a total of 18 bearing failures out of 38 bearings tested, where failure was 
defined by loss of preload (of 1 .3 kN). The failures occurred in nearly equal numbers from the two 
bearing mounts on the test device (see figure 2), eight failures near the load application side and ten at the 
load reaction side (near the load cell). 

Later reexamination of the shuttle mission time line by the NASA Engineering and Safety Center 
(NESC) established the actual operation time to be only 13.1 min per mission at the normal speed of 
80 rpm (1048 rev/mission). This was allocated as 35 sec of flight operation at 60 °C (140 °F) temperature 
and 12.5 min of ground operations (24 °C (75 °F)). The bearing life and reliability results reported here 
have been adjusted to be consistent with the revised mission time. 
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Statistical Analysis 

Weibull Analysis 

In 1939 W. Weibull, (refs. 12 to 14) developed a method and equation for statistically evaluating the 
fracture strength of materials. He also applied the method and equation to fatigue data based upon small 
sample (population) sizes, where the two-parameter expression relating life, L, characteristic life, Zp and 
probability of survival, S is 


lnln 


(l) 

= eln 

f L ] 




UpJ 


where 0<Z<oo;0<>S , <l 


( 1 ) 


When plotting the In In [1 AS] as the ordinate against the In L as the abscissa, fatigue data are assumed 
to plot as a straight line (fig. 3). The ordinate In In [1/5] is graduated in statistical percent of components 
failed or removed for cause as a function of In T, the log of the time or cycles to failure. The tangent of 
the line is designated the Weibull slope e , which is indicative of the shape of the cumulative distribution 
or the amount of scatter of the data. The method of using the Weibull distribution function for data 
analysis for determining component life and reliability was later developed and refined by L.G. Johnson 
(refs. 15 and 16). 

The Johnson-Weibull method has been in continual use by NASA for over 50 years to statistically 
analyze cumulative failure data such as occurs in bearings and gears for which an extensive data base now 
exists in the open literature. The method allows for reasonable engineering estimates and comparisons of 
cumulative life distributions with small sample sizes or populations. 

The Weibull slope of the resultant Weibull plot approximates the statistical distribution of the data. 

As an example, a Weibull slope of 1 approximates an exponential distribution. A Weibull slope of 2 
approximates a Raleigh distribution. A Weibull slope of 3.57 approximates a Gaussian or normal 
distribution. The resulting values of life compare reasonably well with other statistical distributions such 
as log normal. However, the ease of use and consistency of results offers an advantage of the Johnson- 
Weibull method over these other distribution functions. For this reason, the Johnson-Weibull method was 
used to analyze the wear data reported herein. 



Figure 3. — Weibull plot where (Weibull) slope 
of tangent of line is e; probability of survival, 

Sp, is 36.8 percent at which L = Lp or L/Lp = 1 . 
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System Life Prediction 

The reliability (or probability of survival), S and the probability of failure, F are related by F = (1-S). 
For a given time or life, the reliability S sys of a system is the product of the reliabilities S, (i = 1,2,..., n) 
of the components in the system, as shown in equation (2): 

$sys ~ $1 x S 2 X * • • x S n (2) 

If all components have the same reliability S n (as is assumed here), then equation (2) reduces to 

Ssys=SH (3) 


Each actuator has two input bearings and each shuttle has four actuators for a total of eight bearings. 
Thus, for one shuttle, equation (3) can be written as 

Ssys = Sl (4) 

From equation (1), the lives of each of the bearings at a specified reliability can be combined to 
determine the calculated system L sys life using the two-parameter Weibull distribution function (eq. (1)) 
for the bearings comprising the system and strict-series system reliability (refs. 17 to 19) as follows: 


re 

^ sys 


1 1 

— + — + ■ 


W 


% 


L B n n J 


(5) 


In this work, the two shaft bearings are assumed to have the same life — the life of the smaller (size 
106) bearing. In addition, the four actuators are assumed to have equal lives. This means that each of the 
bearings will have the same life at a specified reliability, where L\ = L 2 = ... L n and e x = e 2 = ... e n . 
Accordingly, equation (5) can be written for the eight bearings in four actuators as 


1 



T e 

^ sys 


r 


(6) 


The calculated system life is dependent on the resultant value of the system Weibull slope e. For wear 
data, this value is normally not known with certainty, but a reasonable value can be assumed from the 
Weibull plots of the resultant wear data. 

The bearing system life of the actuators is calculated for each operating condition of their mission 
profile. In order to obtain the mission life of the actuators, the resulting system lives for each of the 
operating conditions are combined in equation (7) using the linear damage (Palmgren-Langer-Miner) rule 
(refs. 17 to 19) where L sys is the life for condition n andX„ is the time fraction spend at condition n , 

(n= 1,2,...). 


1 = X x , x 2 , x, 

Lynis ^ sys j ^sys 2 ^ sys n 


(7) 
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Results and Discussion 


During actuator refurbishment and inspection, the grease-lubricated ball bearings in these actuators 
exhibited various degrees of wear. While a bearing exhibiting significant wear may continue to function 
over an extended time period, it is considered no longer fit for its intended application and, hence, failed. 

As the bearing preload continues to decline due to increasing wear, the actuator can eventually be 
rendered inoperable. In the absence of a viable lubricating film, the worn contacting surfaces can 
experience adhesive wear, possibly leading to seizure of the mating bearing surfaces. Based upon these 
observations, an issue arises regarding the time to removal of the actuators for refurbishing and 
replacement of the bearings. 

There have been 116 shuttle flights in the history of the program from 1981 to 2006. Actual space 
shuttle maintenance history shows that one body flap actuator bearing has been replaced due to excessive 
wear during the history of shuttle flights. A portion of the inner race of this failed flight bearing is shown 
in figure 4. The failure was found after 20 missions on the affected vehicle. In addition, another actuator 
bearing was removed after 20 flights due to formation of a black iron oxide coating, apparently caused by 
decomposition of the lubricant. However, this bearing had only minor wear. 




Figure 4. — Damage to shuttle body flap actuator bearing 
inner race after 20 flights, (a) SEM view of wear band in 
race, (b) Cross section showing cracks below surface. 
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In an effort to determine the life and failure mechanism of the grease-lubricated bearings that support 
the input shaft of the body flap actuators, life tests were performed on a test rig under simulated flight and 
ground operations conditions. The damage to the inner race of one of the failed test bearings is shown in 
figure 5. The damage appears similar to that of the failed flight bearing shown in figure 4. Both bearings 
show minor cracking of the raceway, in addition to the severe wear. The wear tracks of the flight and test 
bearings as measured by a profilometer were similar in width: 2.74 and 2.97 mm (0.108 and 0.1 17 in.), 
respectively. 

A probabilistic analysis using the 2-parameter Weibull-Johnson method was performed on the life test 
data generated by these experiments. The tests and analysis established life and reliability data for both 
shuttle flight and ground operation as a function of the number of shuttle missions flown. 
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Figure 5. — Damage to test bearing at failure, (a) SEM view 
of wear band in race, (b) Cross section showing cracks 
below surface. 
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The bearing lives were calculated using the 2-parameter Weibull-Johnson method for reliabilities of 
99.9, 99.0, and 90 percent. In the test series presented below, we combined results of tests that gave 
similar lives in order to present larger data sets, even though some tests were run under somewhat 
different conditions. 

Tables 2 to 6 summarize the results from four series of tests described below in terms of lives L\ 0 , L\ t 
and Z, 0 .i. The Z 10 life is the time (in terms of the number of bearing revolutions) at which 10 percent of a 
population of bearings can be expected to fail (or 90 percent not to fail). Likewise, L x represents the time 
to fail 1 percent andL 0 .i is the time to failure for 0.1 percent. 

The life is also given in terms of missions, assuming the revised NESC mission length of 1048 shaft 
revolutions (13.1 min). The reliability for the entire system will be the product of the reliabilities in all 
components comprising the system, including the other six bearings in the actuator not considered here. 
The system reliability will always be less than the reliability of the lowest-lived component of the system. 

The air pressure inside the actuator housing during flight is unknown. While the housings have vitron 
seals, it is assumed that the air trapped within the housing will leak away during the several days that the 
shuttle spends in space. On reentry into the atmosphere it is further assumed that the housing will 
repressurize it is not known how rapidly this can occur. However, analysis of the shuttle operation records 
shows that less than five percent of the actuator operating time occurred during flight and thus in possible 
vacuum. The balance of the operating time was ground operation where the bearings operate in air. 
Accordingly, the tests reported herein were conducted in air at atmospheric conditions. 

Bearing wear data were obtained for four series of operating conditions. The test series are described 
below. 


Test Series 1, Mission Spectrum at 60 °C 

These tests used the original, simplified, shuttle program 30-min mission spectrum shown in 
table 1 . The mission spectrum was intended to represent the actual loads and speeds the actuator 
experiences during flight and ground operations. In this series, the bearings were heated to an ambient 
temperature of 60 °C (140 °F) to simulate the flight environment at shuttle reentry. 

Test articles included three used flight bearings plus three commercial bearings modified to be similar 
to the flight bearings. All six bearings completed 48 simulated missions (1 12,800 revolutions) with no 
failures (i.e., six runouts). The individual test duration (inner race revolutions) data are shown in table 2. 
Since there were no failures, Weibull analysis cannot be performed on these data. 


TABLE 2.— TEST SERIES 1, MISSION SPECTRUM TESTS AT 60 °C 


Bearing no. 

Status 

Life, 

Revolutions 

1 

survived 

112800 

2 

survived 

112800 

3 

survived 

112800 

4 

survived 

112800 

5 

survived 

112800 

6 

survived 

112800 


Test Series 2, Mission Spectrum at 24 °C 

These tests used the same mission spectrum as above except the bearings were not heated (ambient 
temperature of 24 °C (75 °F)). Only modified commercial bearings were used because no more used 
flight bearings were available. These tests were run until one of the bearings in the rig failed, thus 
producing three failures out of six bearings tested. Although the data points for the non failed (suspended 
tests) are not shown in the figure, they were statistically weighted in the analysis using the method of 
Johnson (ref. 16). 
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The Weibull analysis of Test Series 2 gives an Ao (90 percent reliability) life of 62,000 revolutions. 
Raw data are shown in table 3A and results are shown in table 3B and figure 6. Based on these data and 
using the revised mission time (13.1 min or 1,048 revolutions), the reliability of one bearing for a life of 
12 shuttle missions is 99.8 percent. For the eight input shaft bearings (assumed to have identical lives) in 
four actuators on one shuttle, the risk of failure would be 1.4 percent (reliability 98.6 percent). 

The Weibull plots in figures 6 to 9 include 90 percent confidence bands for the data. If a large number 
of similar tests were performed, one would expect that 90 percent of the data would lie within these 
confidence bands. 


TABLE 3A.— TEST SERIES 2, MISSION SPECTRUM TESTS AT 24 °C 


Bearing no. 

Status 

Life, 

Revolutions 

1 

failed 

105125 

2 

survived 

105125 

3 

failed 

62771 

4 

survived 

62771 

5 

failed 

129890 

6 

survived 

129890 


TABLE 3B.— TEST SERIES 2, MISSION SPECTRUM TESTS AT 24 °C 
WEIBULL SLOPE, e = 2.556, CHARACTERISTIC LIFE, = 148,693 rev 


Life 

Reliability, 

% 

Revolutions 

Missions 

Ao 

90 

62,000 

59 

u 

99 

25,000 

23 

An 

99.9 

10,000 

10 


CD 

_C 
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0 

-Q 


99 p 
99- 

50- 


c 

0 

o 

l— 

0 

CL 
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o 

to 

03 

-*—> 

CO 


U / 


104 











bands 




5 105 2 

Inner race revolutions 


106 


Figure 6. — Weibull plot of Series 2 mission spectrum tests 
at 24 °C. Failure index 3/6. 


Combination of Test Series 1 and 2 

In actual shuttle operation, approximately 4.5 percent of the operating time would be simulated by 
Test Series 1 (flight) and 95.5 percent by Test Series 2 (ground ops.). Using equation (7) to combine Test 
Series 1 and 2, and for the purpose of calculation, assuming infinite life for Test Series 1 and an Ao 
(90 percent reliability) life of 62,000 revolutions for Test Series 2, the combined Ao life for the system 
equals 64,900 revolutions. 
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The mission life and reliability for the 13.1 min (1048 revolutions), combined operation time were 
predicted by combining the results of the tests summarized in Series 1 and 2 above in proportion to the 
operation time (ground and flight), according to the linear damage rule of equation (7) 


X L+ X2 

L x L 


where L is the life, X\ andX 2 are the time fractions ( X\ + X 2 = 1.00) that occur at conditions 1 and 2 and 
L\ and L 2 are the lives for these conditions. Using the data for 90 percent reliability from Series 1 and 2, 
equation (8) becomes 


1 0.045 0.955 

— — 1 

L go 62,000 


, thus L = 64,900 

64,900 


( 9 ) 


For purposes of comparison only, the data from both series above were combined to produce a 
Weibull plot that represents all of the mission spectrum tests at both elevated and room temperatures 
(12 bearings tested with three failures). The Weibull analysis on this combined set gives an Ao 
(90 percent reliability) life of 80,000 revolutions. The results, shown in table 4 and figure 7, show higher 
life than would be anticipated based on the weighted results from equation (7) above. (Runout tests were 
included in the analysis but are not shown in the figure.) 

The analysis on the combined dataset shows the reliability of one bearing for a life of 12 missions is 
99.99 percent. For the eight input shaft bearings (assumed to have identical lives) in four actuators on one 
shuttle, the risk of failure would be 0.07 percent (reliability 99.93 percent). 


TABLE 4.— TEST SERIES 1 AND 2 (COMBINED), MISSION SPECTRUM TESTS AT 60 °C AND 24 °C WEIBULL SLOPE, 
e - 2.93 1, CHARACTERISTIC LIFE, = 172,866 rev 


Life 

Reliability, 

% 

Revolutions 

Missions 

Ao 

90 

80,000 

77 

u 

99 

36,000 

34 

A.i 

99.9 

16,000 

16 
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c 
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Q_ 
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3 
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99 
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'■§ 2 


104 



90 percent 
confidence 
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Inner race revolutions 


Figure 7. — Weibull plot of Series 1 and 2 mission spectrum 
tests at 60 and 24 °C. Failure index 3/12. 
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Test Series 3, Speed 50 and 80 rpm, Temperature 24 °C, Thrust Loads 16, 20 and 24 kN 

Tests were conducted at room temperature (24 °C (75 °F)) with thrust loads of 16, 20, or 22 kN 
(3500, 4500 or 5000 lb) and speeds of 50 or 80 rpm. The differences in speeds and loads had little effect 
on the lives for the limited range tested; hence, smaller data sets were combined together. Raw data are 
shown in table 5 A and results are shown in table 5B and figure 8. 


TABLE 5A.— TEST SERIES 3, CONSTANT SPEED AND LOAD TESTS AT 24 °C, 16-24 kN, 50 AND 80 rpm 


Bearing no. 

Status 

Life, Revolutions 

Test conditions 

1 

failed 

35310 

50 rpm, 16 kN, 24 °C 

2 

failed 

56850 

50 rpm, 16 kN, 24 °C 

3 

failed 

79000 

50 rpm, 16 kN, 24 °C 

4 

survived 

13170 

50 rpm, 16 kN, 24 °C 

5 

failed 

50640 

50 rpm, 22 kN, 24 °C 

6 

failed 

50640 

50 rpm, 22 kN, 24 °C 

7 

failed 

38400 

50 rpm, 24 kN, 24 °C 

8 

survived 

38400 

50 rpm, 24 kN, 24 °C 

9 

failed 

96480 

80 rpm, 16 kN, 24 °C 

10 

survived 

96480 

80 rpm, 16 kN, 24 °C 

11 

failed 

65040 

80 rpm, 16 kN, 24 °C 

12 

survived 

65040 

80 rpm, 16 kN, 24 °C 

13 

failed 

51024 

80 rpm, 16 kN, 24 °C 

14 

survived 

51024 

80 rpm, 16 kN, 24 °C 

15 

failed 

114240 

80 rpm, 16 kN, 24 °C 

16 

survived 

114240 

80 rpm, 16 kN, 24 °C 

17 

failed 

102240 

80 rpm, 16 kN, 24 °C 

18 

survived 

102240 

80 rpm, 16 kN, 24 °C 

19 

failed 

61440 

80 rpm, 16 kN, 24 °C 

20 

survived 

61440 

80 rpm, 16 kN, 24 °C 


TABLE 5B.— TEST SERIES 3, CONSTANT SPEED AND LOAD TESTS AT 24 °C, 16-24 kN, 50 AND 80 rpm 
i WEIBULL SLOPE, e = 2.739, CHARACTERISTIC LIFE, Lq = 91,798 rev 


Life 

Reliability, 

% 

Revolutions 

Missions 

L\o 

90 

40,000 

39 

u 

99 

17,000 

16 

To. l 

99.9 

7,400 
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Figure 8. — Weibull plot of Series 3 tests at 24 °C, 
16-24 kN; 50 and 80 rpm. Failure index 12/20. 
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Some tests of this series were restarted after a failure by replacing the failed bearing and continuing 
the test with the surviving bearing. In one test, both bearings failed at approximately the same time. 
Twenty bearings were tested with 12 failures. 

Based on these data, the reliability of one bearing for a life of 12 missions is 99.6 percent. For the 
eight input shaft bearings (assumed to have identical lives) in four actuators on one shuttle, the risk of 
failure would be 3.4 percent (reliability 96.6 percent). 

Test Series 4, Speed 50 and 80 rpm, Elevated Temperature 60 and 74 °C, 

Thrust Load 16 kN 

Three bearing failure tests (with three runout tests of the bearings at the other end of the shaft) were 
conducted at elevated temperature (two at 60 °C (140 °F) and one at 74 °C (165 °F)). The tests were run 
at constant speed (50 or 80 rpm) and an axial load of 16 kN (3500 lb). As in series 3 above, there was 
little difference in lives found between these two temperatures and two speeds; therefore, results were 
combined. Raw data are shown in table 6 A and results are shown in table 6B and figure 9. 

Based on these data, the reliability of one bearing for a life of 12 missions is 99.9 percent. For the 
eight input shaft bearings (assumed to have identical lives) in four actuators on one shuttle, the risk of 
failure would be 0.5 percent (reliability 99.5 percent). 


TABLE 6A.— TEST SERIES 4, ELEVATED TEMPERATURE TESTS AT 16 kN LOAD, 50 AND 80 rpm 


Bearing No. 

Status 

Life, 

Revolutions 

Test conditions 

1 

failed 

196050 

50 rpm, 16 kN, 60 °C 

2 

survived 

196050 

50 rpm, 16 kN, 60 °C 

3 

failed 

118950 

50 rpm, 16 kN, 60 °C 

4 

survived 

118950 

50 rpm, 16 kN, 60 °C 

5 

failed 

270336 

80 rpm, 16 kN, 74 °C 

6 

survived 

270336 

80 rpm, 16 kN, 74 °C 


TABLE 6B.— TEST SERIES 4, ELEVATED TEMPERATURE TESTS AT 16 kN LOAD, 50 AND 80 rpm 
WEIBULL SLOPE, e - 2.334 CHARACTERISTIC LIFE, L Q = 301 ,729 rev. 


Life 

Reliability, 

% 

Revolutions 

Missions 

Ao 

90 

115,000 

110 

u 

99 

42,000 

40 

An 

99.9 

16,000 

15 


99 r 



^ confidence 

cl 2 - bands 


1 I i i I i i I 

104 2 5 105 2 5 106 

Revolutions 

Figure 9. — Weibull plot of Series 4 elevated temperature 
tests at 16 kN load, 50 and 80 rpm. Failure index 3/6. 
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Bearing Wear 

In general, the test temperature was found to have the greatest effect on the lives of the bearings, with 
lower temperature (room temperature) tests giving shorter life. This result of lower life at lower test 
temperatures was not expected. It may have been caused by lubricant starvation, because the cooler oil 
flowed back into the contact area at a slower rate after ball passage. 

One method to determine bearing wear is to accurately weigh cleaned bearings before and after a test 
and subtract the two readings. This method suffers from the limitation that it does not detect material 
transferred from one surface to another in addition to the problem of subtracting two nearly-equal numbers. 

The bearings tested here were not weighed prior to testing. Cleaned, failed bearings were weighed 
and compared with cleaned, new bearings of the same type. These indicate an average loss of about 
180 mg or about 0.16 percent. However, the new bearings showed a much greater variation in weight 
from heaviest to lightest (0.60 percent) than the variation between new and failed bearings. 

Bearing failure during tests was marked by a transition from stable bearing temperature and load to 
increasing temperature and declining preload. These failures were caused by the normal wear under 
boundary lubrication shifting to accelerated wear induced by lubricant breakdown. One test (at 50 rpm) 
was continued for four additional hours after the onset of severe wear. (This represents 1 1.5 additional 
missions at 1048 inner race revolutions each). The extended run created severe wear damage in which 
about 75 percent of the preload was lost due to wear. 

After the onset of severe wear, these bearings would no longer be fit for their intended use. However, 
the very gradual onset of this failure mode indicates that imminent seizure is unlikely. Thus, bearing 
failure should not cause a failure of the actuator that would endanger the space shuttle as long as a 
reasonable inspection schedule is followed. 


Estimated System Life and Reliability 

The mission life of these bearings under combined ground and flight operation was predicted by 
combining the results of Series 3 (representing ground operation temperature) and Series 4 (representing 
flight) according to the linear damage rule (eq. (7)). NESC Analysis of the records of the shuttle fleet has 
established an average operation time of 13.1 min per mission. This consists of 35 sec of flight operation 
at an assumed temperature of 60 °C (140 °F) and 12.5 min of ground operations at 24 °C (75 °F). 
Assuming a normal operation speed of 80 rpm, there will be 1048 revolutions per mission. The 13.1 min 
operation time is less than half the 30 min initially assumed by the NESC. 

The mission life and reliability for the 13.1 min combined operation time were predicted by combining 
the results of the tests summarized in Series 3 and 4 above in proportion to the operation time (ground and 
flight), according to the linear damage rule of equation (8). Using the data for 90 percent reliability from 
Series 3 and 4, equation (8) becomes 


1 _ 0.045 0.955 

L~ 110 39 


— , thus L = 40 
40 


( 10 ) 


The predicted Zi 0 and Z, 0 .i lives for combined 24 and 60 °C (75 and 140 °F) operations is 40 and 
7 missions, respectively. The reliability of a single bearing for a life of 12 missions is 99.6 percent. Each 
actuator has two input bearings and each shuttle has four actuators, thus, from equation (3), based on four 
actuators and eight bearings of equal life, per shuttle, 

S sys = S% = (0.996) 8 = 0.969 or 96.9 percent (1 1) 


Therefore, the risk of an input shaft bearing failure would be 3.1 percent (reliability 96.9 percent) for 
12 missions of one shuttle (assuming all input shaft bearings have identical reliability). The relation 
between reliability, number of bearings involved and number of missions is shown in figure 10. 
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Figure 10. — Estimated life and reliability of input shaft 
bearings. 


Predicted Failure Rate for Actuator Input Shaft Bearings 

As a final way to present body flap actuator input shaft bearing test data, we relate the bearing 
reliability found from this test program to the expected failure rate as a function of the number of 
missions for the space shuttle fleet. 

We used the reliability level for eight bearings presented in the previous section (96.9 percent). This 
reliability is for 12 shuttle missions using the combined mission profile discussed above (35 sec of flight 
and 12.5 min ground operation). We assumed the Weibull slope (2.739) as found for the 24 °C (75 °F) 
tests and, using equation (1), computed the characteristic life to be 42.4 missions for one bearing failure in 
one vehicle of the fleet. The characteristic life is the time by which 63.2 percent of a large population of 
identical vehicles would have a failure. 

We assumed the following scenario: The fleet starts out with four new shuttle vehicles. These are 
each flown in turn until a bearing failure occurs. (No other failures are considered, only in body flap 
actuator input shaft bearings.) Then the shuttle with a failed bearing is retired and the remaining shuttles 
continue to fly until an input bearing has failed in each of the four shuttles. In this calculation, the 
reliability, S(t) was estimated from the median rank of the failures, according to equation (12) (ref. 20), 
where i is the failure number and n is the number of samples (in this case, n = 4): 


F 


i - 0.3 
n + 0.4 


( 12 ) 
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The predicted number of shuttle missions until failure based on the scenario described above was 
calculated from equations (1) and (12) and is shown in table 7. We predict that the first failure will occur 
at about the 22nd mission of the shuttle vehicle involved. If all four vehicles at that time have the same 
number of missions, the total number of missions will be 88. Then we assume the remaining three 
vehicles continue to fly until the second failure occurs at flight 33 on another shuttle. At that time, the 
fleet will have 121 missions [22+(3><33)]. Likewise, failure number three occurs at flight 42 or fleet 
mission 139 [22+33+(2x42)] and the final failure at flight 53, or fleet mission 150 (22+33+42+53). 


TABLE 7.— PREDICTED FAILURE RATE FOR ACTUATOR INPUT SHAFT BEARINGS 


Failure no. 

Mission no. on failed shuttle 

Cumulative fleet missions 

1 

22 

88 

2 

33 

121 

3 

42 

139 

4 

53 

150 


Actual space shuttle maintenance history shows that one body flap actuator bearing has been replaced 
due to excessive wear during the history of shuttle flights through 2006. The failure was found after 20 
missions on the affected vehicle. In addition, another actuator bearing was removed after 20 missions due 
to a black iron oxide coating, apparently caused by decomposition of the lubricant. However, there was 
only minor wear associated with the bearing having the blackened ball. 

The one historical failure due to wear at 20 missions is consistent with the results of table 7, which 
predicts the first failure at 22 missions. Since there have been 116 flights in the history of the program 
through 2006, the analysis indicates another failure might have been expected soon in the absence of 
inspection and bearing replacement. 


Summary of Results 

The United States space shuttle has four body flap actuators (two on each wing) on a common 
segmented shaft to control the position of the large body flap on the space shuttle. During actuator 
refurbishment and inspection, the grease-lubricated ball bearings in these actuators exhibited various 
degrees of wear. Bearing tests were performed to experimentally duplicate the operating conditions of the 
space shuttle actuator ball bearings and to generate a statistical data base to codify the wear in these 
bearings. The usable life and reliability of these actuator bearings were determined based on a two- 
parameter Weibull distribution function using strict-series system reliability for both shuttle flight and 
ground operation as a function of the number of shuttle missions flown. These experimental results were 
compared to field data from the space shuttle fleet. The following results and conclusions were obtained: 

1 . The actuator bearing failure mechanism was severe wear that created the onset of bearing preload loss. 
After the onset of severe wear, the bearings would no longer be fit for their intended use. However, the 
very gradual onset of this failure mode indicates that imminent seizure is unlikely. Thus, bearing failure 
should not cause a failure of the actuator and endanger the space shuttle as long as a reasonable 
inspection schedule is followed. 

2. The Weibull analysis of the test data for the four actuators on one shuttle, each with a 2-bearing shaft 
assembly, established a reliability level of 96.9 percent for a life of 12 missions. 

3. A reasonable inspection and maintenance program of the body flap actuators should be implemented to 
enable safe operation of the shuttle orbiter fleet. This interval should not be more than 12 missions for 
any shuttle vehicle. 

4. A probabilistic system analysis for four shuttles, each of which has four actuators, predicts a single 
bearing failure in one actuator of one shuttle after 22 missions. (This means a total of 88 missions for a 
4-shuttle fleet.) This prediction is comparable with actual shuttle flight history in which a single actuator 
bearing was found to have failed by wear at 20 missions. Since there have been 116 flights in the history 
of the program through 2006, the analysis indicates another failure might have been expected soon in 
the absence of inspection and bearing replacement. 
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